Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3234322e3138382e302f32322d3234203d3e2030.roa
File: 39322e3234322e3138382e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: avgggtVLRV5uF37NMwrqiFOE651vnOg9+h2a6juA+FQ=
Subject key identifier: B2:8C:FE:1B:4A:A9:88:54:7C:51:7E:DC:22:92:EF:2A:C7:1E:F5:F4
Certificate issuer: /CN=08fb9ba827e6f10a7af37490803dd5a076397235
Certificate serial: 0F8362515564032700B82DF6AD70018ED2741F
Authority key identifier: 08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3234322e3138382e302f32322d3234203d3e2030.roa
Signing time: Mon 27 Mar 2023 08:28:00 +0000
ROA not before: Mon 27 Mar 2023 08:23:00 +0000
ROA not after: Mon 25 Mar 2024 08:28:00 +0000
asID: 0
IP address blocks: 92.242.188.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:83:62:51:55:64:03:27:00:b8:2d:f6:ad:70:01:8e:d2:74:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08fb9ba827e6f10a7af37490803dd5a076397235
Validity
Not Before: Mar 27 08:23:00 2023 GMT
Not After : Mar 25 08:28:00 2024 GMT
Subject: CN=B28CFE1B4AA988547C517EDC2292EF2AC71EF5F4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:71:f7:f5:fa:8c:3b:1d:c4:fe:ac:0e:e3:
8d:88:bd:6e:01:f7:75:19:23:a2:9b:a0:08:07:5e:
f7:22:f7:0f:7e:0e:e3:db:54:43:52:b5:52:3e:51:
dd:96:49:53:bd:42:bb:8c:4c:4d:3e:8d:01:08:09:
e5:25:4a:e1:fe:8b:ad:e4:4c:cb:d3:31:dd:1a:43:
b5:bc:ea:c2:7d:75:ea:01:95:f2:53:0f:d1:4e:5f:
77:71:e1:fe:3a:1a:93:cf:82:e6:2b:e8:5b:ff:83:
b4:b0:f9:c9:c9:3f:e3:8e:8e:6a:18:cc:57:00:43:
66:f2:3f:cc:cc:c0:3e:0a:38:bb:f5:26:56:1f:60:
b6:43:15:c4:22:e1:59:dd:f5:2a:db:3b:1c:6a:ac:
eb:08:8b:f8:27:dc:13:f6:9d:fd:97:ef:c8:76:34:
76:ea:a0:18:e3:e1:15:da:70:67:89:60:e1:0e:e2:
52:6b:c4:e6:4f:7d:25:36:66:27:6f:97:65:0e:7c:
b6:54:95:f1:04:20:7f:f3:69:ef:70:96:bf:f9:f8:
47:b9:8d:2e:d7:de:78:e4:35:3f:a4:3f:98:f0:aa:
1d:d4:c9:ef:d5:2a:65:c3:b0:84:cf:58:da:96:e4:
ec:21:9f:e3:e6:cc:ef:4d:b6:ef:7d:51:f1:a8:1e:
8f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:8C:FE:1B:4A:A9:88:54:7C:51:7E:DC:22:92:EF:2A:C7:1E:F5:F4
X509v3 Authority Key Identifier:
keyid:08:FB:9B:A8:27:E6:F1:0A:7A:F3:74:90:80:3D:D5:A0:76:39:72:35
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/08FB9BA827E6F10A7AF37490803DD5A076397235.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPubqCfm8Qp683SQgD3VoHY5cjU.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/2/39322e3234322e3138382e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.242.188.0/22
Signature Algorithm: sha256WithRSAEncryption
93:38:c3:34:cd:98:ec:6a:53:7c:49:b4:60:d8:80:c1:2e:bb:
83:d9:59:ed:52:6e:72:15:f9:32:b6:89:4b:8a:e5:f1:d9:77:
2a:69:91:18:4c:df:be:9a:09:26:1f:11:2e:9a:fe:f2:74:a0:
d2:84:68:67:4a:fc:e9:71:62:e6:c6:6e:74:07:d3:55:ba:59:
6a:82:04:e6:d9:a3:12:62:24:48:59:3b:57:4c:6e:bd:22:5d:
75:f6:51:da:6d:91:30:a8:d3:d2:f7:75:fa:ca:92:e9:0e:65:
74:50:c2:44:5d:b4:41:e0:c0:45:c3:66:24:c7:79:42:2a:93:
1f:46:49:b0:f1:da:39:2f:43:a6:73:f3:16:f6:2c:81:44:02:
32:73:8d:ea:e4:4c:56:ca:d0:7b:30:5a:a1:fe:c5:47:16:93:
26:4a:af:e2:fa:7f:4f:08:bf:c2:e1:ad:18:75:3f:11:ff:91:
ea:7d:64:fa:4a:42:bb:58:ba:52:d6:9a:65:ec:47:d5:f9:70:
32:a7:60:93:c0:11:91:d8:d0:16:c7:bb:cc:4d:04:79:a4:51:
7e:2c:80:e8:02:d4:f9:18:b3:eb:46:cc:e4:20:74:a9:84:98:
8d:a4:21:19:d9:48:40:d0:06:b0:a5:25:99:55:76:0d:ff:07:
e7:27:a9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 20:01:11 2024 by rpki-client on console-ams.rpki-client.org